Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
File: Cani7ovOptW5GcSjPSbZu_mCqEM.mft (raw, json)
Hash identifier: R10+y07Q/IGYnhS+MCyI1IgIGcwWGMBvgsfbPA3uvdA=
Subject key identifier: 06:AA:47:7F:8E:AE:D1:9E:BD:20:94:62:7F:E4:23:EB:A2:D2:55:57
Authority key identifier: 09:A9:E2:EE:8B:CE:A6:D5:B9:19:C4:A3:3D:26:D9:BB:F9:82:A8:43
Certificate issuer: /CN=09a9e2ee8bcea6d5b919c4a33d26d9bbf982a843
Certificate serial: 019CAA8FE5984FBEABE5390A339C86D417DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
Manifest number: 0CC4
Signing time: Sun 01 Mar 2026 18:01:22 +0000
Manifest this update: Sun 01 Mar 2026 18:01:22 +0000
Manifest next update: Mon 02 Mar 2026 18:01:22 +0000
Files and hashes: 1: Cani7ovOptW5GcSjPSbZu_mCqEM.crl (hash: UDMxzzpge5u1w6P/yQMeW8NujsxhtbOJoXUEkN7HdnE=)
2: ToM6N48G8WGMzFpuQ0Gt_pOWEHc.roa (hash: f5NlaoVCrJ+ZbPHrxjLY8hxzqQ0aKUh9p8kFFA8E7Vo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:e5:98:4f:be:ab:e5:39:0a:33:9c:86:d4:17:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a9e2ee8bcea6d5b919c4a33d26d9bbf982a843
Validity
Not Before: Mar 1 18:01:22 2026 GMT
Not After : Mar 2 18:01:22 2026 GMT
Subject: CN=06aa477f8eaed19ebd2094627fe423eba2d25557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c1:aa:84:c0:38:21:ac:46:dd:6b:ed:7d:33:
50:64:97:6b:bf:c7:f7:86:af:72:9e:57:46:c9:18:
a1:4e:0a:3b:fd:8b:6a:a2:18:52:df:7f:75:94:1c:
ac:0c:6a:f1:af:8e:29:fe:20:4d:5c:4e:03:09:db:
ae:3f:8b:61:02:00:db:b9:1c:f6:9c:b7:68:20:5c:
ab:17:a2:21:7f:8b:15:d8:80:66:34:79:1e:94:05:
13:e1:36:8e:c1:35:f9:99:0f:fd:56:45:7d:ec:77:
6f:d7:dd:23:eb:83:1c:00:67:5b:5b:b1:76:d7:b8:
d3:d3:f1:3b:af:60:c7:75:dc:8c:f4:36:87:80:8b:
41:1f:d2:c6:e9:68:05:5e:6c:f8:a3:43:7c:0b:4b:
2c:7a:c2:ae:5d:6e:ef:27:b4:da:47:c9:0b:e7:af:
03:4d:e3:0e:68:57:ff:74:23:54:6b:8c:67:dd:22:
eb:80:cc:22:97:1c:f6:d0:d7:cd:2f:6d:da:12:cd:
d2:c2:77:11:69:47:eb:09:81:10:75:b8:f6:51:02:
88:7a:8a:15:d7:be:6a:df:4d:a4:21:63:40:fa:18:
14:9f:31:65:60:35:23:f0:93:da:e9:f2:b3:c6:17:
11:71:86:63:92:cd:b2:fc:3e:06:3a:18:2e:b8:2a:
27:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:AA:47:7F:8E:AE:D1:9E:BD:20:94:62:7F:E4:23:EB:A2:D2:55:57
X509v3 Authority Key Identifier:
keyid:09:A9:E2:EE:8B:CE:A6:D5:B9:19:C4:A3:3D:26:D9:BB:F9:82:A8:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:5a:3b:47:e2:70:be:2d:96:4b:5c:29:2f:fa:9c:cf:18:4c:
bd:8d:3c:f6:b9:93:54:dd:5f:43:8a:c7:8b:20:5a:36:74:3b:
3f:87:49:8f:c5:7f:af:55:1b:55:f3:04:c6:ce:29:27:33:17:
9b:4e:64:8a:df:52:25:0c:dd:03:bf:b4:d6:35:ca:a2:a0:0b:
2c:25:4c:4a:ff:8e:be:46:25:f4:3a:6d:9d:66:be:7f:7d:34:
4b:82:8e:8d:4d:97:97:be:e6:c2:8e:6c:f2:4d:cc:c9:10:d0:
8a:c9:75:8d:bc:d0:5b:af:7b:ba:56:e1:e4:9e:fa:9e:43:49:
83:7a:a4:25:62:84:dd:a2:d1:38:3c:81:7e:e4:61:e5:e1:c3:
b6:19:84:53:35:29:ec:42:ce:78:4c:3f:04:26:b4:36:ba:71:
e0:51:f9:47:5f:50:af:05:65:a6:91:50:6b:ed:3f:10:00:c0:
cf:8b:b1:cc:d5:a0:d9:63:05:91:f4:fc:ef:4e:bf:05:d4:55:
e9:0d:37:82:bb:a5:2f:43:c4:73:69:fb:ff:24:bb:ec:34:0e:
1e:9c:13:94:1f:80:a2:24:88:88:0c:a4:41:a2:c4:7a:cf:31:
24:0d:fe:77:ea:53:10:12:b2:4d:91:83:06:37:6b:bc:62:ec:
ef:5d:ad:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:42:59 2026 by rpki-client